Static task
static1
Behavioral task
behavioral1
Sample
c782afb472ec8c1a1eb95e5a3428af24_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c782afb472ec8c1a1eb95e5a3428af24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c782afb472ec8c1a1eb95e5a3428af24_JaffaCakes118
-
Size
469KB
-
MD5
c782afb472ec8c1a1eb95e5a3428af24
-
SHA1
f4619530e5a6252bee2412d10f5bd71e447eb447
-
SHA256
26934aabb98e48d768d360f0f142953038b9eb93e7b5c3a11a7842143be5221d
-
SHA512
b4e29082e6e9052f7ad6847e6281f2bfad712c943e30ca95ef6e52d6efa6250f0ae98fa533e5b9168558b49203cfbc0a0059ef027a4be7b011fee9dfa2ea1c1d
-
SSDEEP
6144:yG7tO9WqPy2xdxCNYZo/wDbjZLA4ZFDit0KocYAj31MSCb1al24JSuvC2lOG:yG7tO9Va2zFHVLoz55Cb1wZtGG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c782afb472ec8c1a1eb95e5a3428af24_JaffaCakes118
Files
-
c782afb472ec8c1a1eb95e5a3428af24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.edata Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE